Introduction

Italian regulators have delivered one of their largest penalties against a major technology company, fining Meta €805 million for accessing photos stored on Android devices without obtaining clear, specific consent from users. The action targets a Facebook feature that drew images and videos from personal galleries to suggest content for posts.

What Happened

Italy's Data Protection Authority determined that Meta failed to properly notify roughly 20 million smartphone users that the Facebook app could access their photo and video libraries. The regulator said a single, app-wide authorization was not enough to cover the generation of post suggestions based on gallery content, and the initial notice did not make that scope clear.

As part of the ruling, Meta has 60 days to turn off the feature by default and request separate consent from users. The authority cited the large number of people affected, the ongoing nature of the issue for anyone who has not updated the app, and what it described as Meta's lack of cooperation.

Why This Matters

The fine underscores how seriously European data watchdogs are treating default access to personal media. By treating a broad app permission as insufficient for photo-based suggestions, the decision could influence how other platforms request access to device galleries and handle user consent.

It also arrives shortly after a separate U.S. ruling in which a New Mexico judge ordered Meta to pay $25 billion over allegations that the company misled the public about its handling of Facebook user data, adding to mounting legal and financial pressure on the social media giant.

Key Takeaways

  • Italy fined Meta €805 million for accessing Android users' photos without specific consent.
  • The penalty concerns roughly 20 million Facebook users and a feature that suggested posts from phone galleries.
  • Meta must disable the feature by default within 60 days and obtain separate user consent.
  • The company plans to appeal and says users already control photo permissions through device settings.
  • The fine is among the largest ever issued by Italy's data protection authority to a tech company.

Conclusion

Meta has said it strongly disagrees with the regulator's assessment and intends to challenge the fine, arguing that the feature operates only after device-level permission is granted and can be changed at any time. For now, the ruling stands as a significant reminder that broad authorizations may not satisfy strict European privacy standards, and that tech platforms face growing scrutiny over how they use personal photos and videos.